128 lines
3.2 KiB
JavaScript
128 lines
3.2 KiB
JavaScript
'use strict';
|
|
|
|
const Table = require('.');
|
|
const UUID = function b(a){return a?(a^Math.random()*16>>a/4).toString(16):([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,b)};
|
|
|
|
|
|
class Token extends Table{
|
|
static _key = 'token';
|
|
static _keyMap = {
|
|
'created_by': {isRequired: true, type: 'string', min: 3, max: 500},
|
|
'created_on': {default: function(){return (new Date).getTime()}},
|
|
'updated_on': {default: function(){return (new Date).getTime()}, always: true},
|
|
'token': {default: UUID, type: 'string', min: 36, max: 36, isPrivate: true},
|
|
'is_valid': {default: true, type: 'boolean'},
|
|
}
|
|
|
|
constructor(...args){
|
|
super(...args);
|
|
}
|
|
|
|
async check(){
|
|
try{
|
|
return this.is_valid;
|
|
}catch(error){
|
|
return false
|
|
}
|
|
}
|
|
}
|
|
|
|
Token.register();
|
|
|
|
class AuthToken extends Token{
|
|
static _keyMap = {
|
|
...super._keyMap,
|
|
user: {model: 'User', rel: 'one', localKey: 'created_by'},
|
|
}
|
|
|
|
static async create(data){
|
|
data.created_by = data.username;
|
|
return super.create(data)
|
|
|
|
}
|
|
}
|
|
AuthToken.register();
|
|
|
|
class InviteToken extends Token{
|
|
static _keyMap = {
|
|
...super._keyMap,
|
|
claimed_by: {default: '__NONE__', isRequired: false, type: 'string'},
|
|
mail: {default: '__NONE__', type: 'string'},
|
|
mail_token: {default: '__NONE__', type: 'string'},
|
|
groups: {default: '[]', type: 'string'},
|
|
}
|
|
|
|
async consume(data){
|
|
try{
|
|
if(this.is_valid){
|
|
data['is_valid'] = false;
|
|
|
|
await this.update(data);
|
|
return true;
|
|
}
|
|
return false;
|
|
|
|
}catch(error){
|
|
throw error;
|
|
}
|
|
}
|
|
}
|
|
InviteToken.register();
|
|
|
|
class ImpersonationToken extends Token {
|
|
static _keyMap = {
|
|
...super._keyMap,
|
|
target_uid: {isRequired: true, type: 'string', min: 1, max: 200},
|
|
temp_hash: {isRequired: true, type: 'string', min: 1, max: 500},
|
|
expires_at: {default: function(){ return (new Date).getTime() + 7200000 }, type: 'number'},
|
|
}
|
|
|
|
get isExpired() {
|
|
return (new Date).getTime() > this.expires_at;
|
|
}
|
|
|
|
static async add(data) {
|
|
data.created_by = data.admin_uid;
|
|
return this.create(data);
|
|
}
|
|
}
|
|
ImpersonationToken.register();
|
|
|
|
class PasswordResetToken extends Token {}
|
|
PasswordResetToken.register();
|
|
|
|
class OtpToken extends Token {
|
|
static _keyMap = {
|
|
...Token._keyMap,
|
|
uid: {isRequired: true, type: 'string'},
|
|
code: {isRequired: true, type: 'string'},
|
|
method: {isRequired: true, type: 'string'},
|
|
expires_at: {default: function(){ return (new Date).getTime() + 600000 }, type: 'number'},
|
|
};
|
|
|
|
get isExpired() {
|
|
return (new Date).getTime() > this.expires_at;
|
|
}
|
|
|
|
// Factory method — named `issue` to avoid shadowing Token's `create(data)`
|
|
static async issue(uid, method) {
|
|
const existing = await this.listDetail({uid});
|
|
for (const t of existing) {
|
|
if (t.is_valid) await t.update({is_valid: false});
|
|
}
|
|
const code = String(Math.floor(100000 + Math.random() * 900000));
|
|
return this.create({uid, code, method, created_by: uid});
|
|
}
|
|
|
|
static async verify(uid, code) {
|
|
const tokens = await this.listDetail({uid});
|
|
const match = tokens.find(t => t.is_valid && !t.isExpired && t.code === code);
|
|
if (!match) return null;
|
|
await match.update({is_valid: false});
|
|
return match;
|
|
}
|
|
}
|
|
OtpToken.register();
|
|
|
|
module.exports = {Token, InviteToken, AuthToken, ImpersonationToken, PasswordResetToken, OtpToken};
|